CVE-2025-66551CWE-639

CVE-2025-66551

Medium · published December 5, 2025

CVSS v3.1
6.3
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-12-05T23:15Z
Affected products (2)
ProductVersionsFixed in
nextcloud/tables≥ 0.4.0, < 0.8.60.8.6
nextcloud/tables≥ 0.9.0, < 0.9.30.9.3
References (4)
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-w787-vwqp-8wr7 · [email protected]https://github.com/nextcloud/tables/commit/39f24a62fb41fd7a8bda65325f8bbafdc91c731c · [email protected]https://github.com/nextcloud/tables/pull/1810 · [email protected]https://hackerone.com/reports/3137895 · [email protected]
EPSS history
Timeline
  • 05 DEC 17:15Z
    Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users
    cvelistv5